Hi all On our LAN, we have a DHCP server that offers fixed IPs to some MACs. (We dont use such solutions as NuFW yet) We would like to ensure one IP adress is used by the assigned MAC. (QoS matter) Is this a good enough solution: -A INPUT -m mac --mac-source 00:15:C5:F4:29:7C -s ! 192.168.1.13 -j REJECT -A FORWARD -m mac --mac-source 00:15:C5:F4:29:7C -s ! 192.168.1.13 -j REJECT Is there any better one? -- Architecte Informatique chez Blueline/Gulfsat: Administration Systeme, Recherche & Developpement +261 33 11 207 36 -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html